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igning k^v expiry data to a plurality of clients, that are selectable on a per client basis wherein 
the digital signature key pairs are not shared among users; 

determining wither a digital signature key pair update request has been received from a 
client unit; 

receiving a new digital signature key pair from the client unit in response to the digital 
signature key pair update request; and 

wherein the step of associating the stoi^d selected expiry data includes creating a new 
digital signature certificate containing the selected ^blic key expiry data selected for the client 
that generated the digital signature key pair update requesu 




(Dptefe)^ 



14. (SixNtimes amended): A system for providing updated digital signature key pairs 
to a plurality of clients in a public key system comprising: 

multi-client management means for providing selectable digital signature expiry data to a 
plurality of clients and not by a citent, including at least both public verification key expiry data 
and private signing key expiry data th^t are selectable on a per client basis wherein the digital 
signature key pairs are not shared among 1 

means, accessible by the multi-client meager means, for digitally storing both selected 
public key expiry data and selected private key expiry data for association with a new digital 
signature key pair; 

means, responsive to the stored selected public key expiry data, for associating the stored 
selected expiry data with the new digital signature key pair to afi;ect a transition from an old 
digital signature key pair to a new digital signature key pair; 
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\ means for determining whether a digital signature key pair update request has been 
receiveoNfrom a client unit; 

meahs for receiving a new digital signature key pair from the client unit in response to the 
digital signature\key pair update request; and 

wherein the*, means for associating the stored selected expiry data creates a new digital 
signature certificate containing the selected public key expiry data selected for the client that 
generated the digital signature key pair update request. 

18. (Dptete) \ / 

2 1 . (Six times amended): A storage medium comprising: 

a stored program for execution by a processor wherein the program facilitates providing 
updated digital signature key pairs irka public key system by: 

allowing entry of selectable expiry data for a plurality of clients and not through a client, 
including both at least public verification\ey expiry data and signing private key expiry data that 
are selectable on a per client basis whereinNhe digital signature key pairs are not shared among 
users; \ 

digitally storing both selected public key expiry data and selected private key expiry data 
for association with a new digital signature key pair;\ 

associating the stored selected expiry data with the new digital signature key pair to affect 
a transition from an old digital signature key pair to a new^digital signature key pair; 

determining whether a digital signature key pair update request has been received from a 
client unit; \ 

receiving a new digital signature key pair from the clientWit in response to the digital 
signature key pair update request; and \ 
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creating a new digital signature certificate containing the selected public key expiry data 
selected fisy the client that generated the digital signature key pair update request. 



24. \(Del^ 




30. (Six times amended): A method for providing updated digital signature key pairs 
to a plurality of client in a public key system comprising the steps of: 

providing, by a multi-client manager unit and not by a client, selectable digital signature 
expiry data including at least public verification key expiry data, and selectable private signing 
key expiry data to a plurality of clients, that are selectable on a per client basis wherein the 
digital signature key pairs are not shared among users; 

digitally storing both selected public key expiry data and selected private key expiry data 
for association with a new digital signature\ey pair; 

determining whether a digital signature^ key pair update request has been received from a 
client unit; 

receiving a new digital signature key pair ffym the client unit in response to the digital 
signature key pair update request; 

associating the stored Selected expiry data with the^ew digital signature key pair to affect 
a transition from an old digital signature key pair to a new digital signature key pair; and 

wherein the step of associating the stored selected expiV data includes creating a new 
digital signature certificate containing the selected public key expiry data selected for the client 
generating the digital signature key pair update request, a user publi\ key, a user name and a 
signature of the multi-client manager unit. 
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